Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/DW3GbMOENrasMel-cS0hlAfIPPQ.mft
File: DW3GbMOENrasMel-cS0hlAfIPPQ.mft (raw, json)
Hash identifier: 3BTbDsBeFya8kAopSEjCA6FT5SWf34dVP55ZKvJKyoA=
Subject key identifier: 3C:4F:98:7A:50:B3:58:70:A0:69:DF:D0:1F:6F:6C:F4:DD:14:07:89
Authority key identifier: 0D:6D:C6:6C:C3:84:36:B6:AC:31:E9:7E:71:2D:21:94:07:C8:3C:F4
Certificate issuer: /CN=0d6dc66cc38436b6ac31e97e712d219407c83cf4
Certificate serial: 0197B7EAE954CF3F253D93BB32A44AFB2B2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DW3GbMOENrasMel-cS0hlAfIPPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/DW3GbMOENrasMel-cS0hlAfIPPQ.mft
Manifest number: 0439
Signing time: Sat 28 Jun 2025 19:01:55 +0000
Manifest this update: Sat 28 Jun 2025 19:01:55 +0000
Manifest next update: Sun 29 Jun 2025 19:01:55 +0000
Files and hashes: 1: DW3GbMOENrasMel-cS0hlAfIPPQ.crl (hash: V/j3JP4RlxH9O6o97/T5Kbbybz+csg3aCesJq2EHVDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/DW3GbMOENrasMel-cS0hlAfIPPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/DW3GbMOENrasMel-cS0hlAfIPPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/DW3GbMOENrasMel-cS0hlAfIPPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:e9:54:cf:3f:25:3d:93:bb:32:a4:4a:fb:2b:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d6dc66cc38436b6ac31e97e712d219407c83cf4
Validity
Not Before: Jun 28 19:01:55 2025 GMT
Not After : Jun 29 19:01:55 2025 GMT
Subject: CN=3c4f987a50b35870a069dfd01f6f6cf4dd140789
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:34:36:e8:6b:0e:93:97:a0:b0:49:4d:2e:b0:
6b:7b:90:a6:cb:e2:ae:11:81:8a:d5:71:11:14:27:
a6:a0:32:0f:12:10:7f:b7:3f:f1:9c:07:cf:09:05:
82:69:4d:74:60:8b:db:d8:a7:93:22:74:0c:2a:64:
23:1e:a2:f6:a6:ed:70:fa:72:c6:e9:f0:8d:79:86:
2a:50:97:d3:4c:36:59:78:8f:67:b3:e0:50:52:fd:
fb:cb:b7:d0:16:ff:b3:4a:9e:5b:b2:39:3b:0b:6b:
2a:2a:99:b3:dd:57:fe:1a:31:80:ab:8d:93:a7:4b:
ac:32:a7:1c:9b:d3:71:52:fd:75:1b:18:5d:0f:b3:
49:b4:51:9b:5e:f9:14:43:40:44:84:b4:8f:7a:4c:
e2:7c:a1:98:de:5f:c7:db:bb:39:95:b8:ad:e6:04:
7f:c3:0c:a6:18:1a:81:f4:d9:07:e0:48:d4:cd:90:
f2:14:5b:bb:d4:6c:30:de:23:40:f2:46:7e:28:4a:
07:a1:a0:aa:c1:8a:2d:de:f4:6c:c0:31:22:75:4c:
34:6f:85:63:2a:a6:da:34:b3:c2:1a:4b:37:3d:98:
f4:6e:e5:45:7f:f8:b3:e1:21:45:85:14:04:d6:86:
8e:0e:e9:4e:83:0f:97:cb:17:34:b7:79:42:2d:a8:
09:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:4F:98:7A:50:B3:58:70:A0:69:DF:D0:1F:6F:6C:F4:DD:14:07:89
X509v3 Authority Key Identifier:
keyid:0D:6D:C6:6C:C3:84:36:B6:AC:31:E9:7E:71:2D:21:94:07:C8:3C:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DW3GbMOENrasMel-cS0hlAfIPPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/DW3GbMOENrasMel-cS0hlAfIPPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/3859e6-43ac-4c74-b4fa-9dd52313ae7c/1/DW3GbMOENrasMel-cS0hlAfIPPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:94:1c:5a:1e:0e:6f:0c:b3:db:bd:ec:b6:28:74:8d:5d:bf:
43:03:1d:8e:61:08:9c:1b:2c:39:11:f3:3a:cb:85:d9:e7:6e:
fa:ca:30:c2:d0:86:88:3e:e2:6f:d4:00:00:1a:d4:79:e6:49:
f2:bf:07:e3:ee:ac:2a:1e:c6:5f:d0:04:f2:22:07:fc:7a:fe:
68:ad:93:98:90:51:38:1f:bf:95:93:23:57:7f:d9:dc:24:05:
93:bb:db:a1:3f:e7:90:78:2f:be:30:71:d9:28:e2:62:0c:52:
01:c7:2d:35:2f:a3:4a:4b:23:d6:29:94:ed:2a:8a:75:d3:ae:
27:f9:bd:e3:2b:e8:a4:cd:6d:d0:4e:fb:84:09:5b:1a:9f:9b:
8f:27:dd:65:6f:1c:a2:e8:19:90:7e:85:0a:45:d0:f5:06:be:
50:8b:81:4f:54:bb:2f:c1:ac:6f:93:f4:0f:11:cf:a4:28:e2:
8b:41:b1:d5:80:41:4a:d6:c6:36:2a:da:ba:77:97:be:82:33:
a8:2f:0a:b3:b0:d9:73:41:69:38:1e:b9:40:dc:ff:c4:b9:32:
39:b5:70:73:a2:4c:3c:46:11:18:39:8d:6c:63:45:d8:a3:74:
5b:48:c8:06:4c:dd:ec:7e:d3:e9:ea:df:f8:00:f8:df:ba:45:
9f:de:67:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 28 23:26:44 2025 by rpki-client